]> git.baikalelectronics.ru Git - kernel.git/commit
netfilter: nf_ct_sane: remove pseudo skb linearization
authorFlorian Westphal <fw@strlen.de>
Tue, 9 Aug 2022 13:16:32 +0000 (15:16 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Thu, 11 Aug 2022 14:50:25 +0000 (16:50 +0200)
commit48f8c9a78c3ea8e0a5c69ad3e9bdb798cfb36911
tree7044005820acce1b7f596c8722e8042adfe5b8e6
parent600623a2163e32af5ead260186e7320df7ede47c
netfilter: nf_ct_sane: remove pseudo skb linearization

For historical reason this code performs pseudo linearization of skbs
via skb_header_pointer and a global 64k buffer.

With arrival of BIG TCP, packets generated by TCP stack can exceed 64kb.

Rewrite this to only extract the needed header data.  This also allows
to get rid of the locking.

Fixes: f4d2f29901ff ("net: allow gso_max_size to exceed 65536")
Fixes: 12478a2acbca ("net: allow gro_max_size to exceed 65536")
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nf_conntrack_sane.c